https://hexpysya.github.io/tags/false-positive/Recent content in False Positive on bubka hacks stuffHugo -- gohugo.ioen-usThu, 02 Apr 2026 00:00:00 +0000https://hexpysya.github.io/blue_team/ld-ls-command-detected-in-requested-url/Thu, 02 Apr 2026 00:00:00 +0000https://hexpysya.github.io/blue_team/ld-ls-command-detected-in-requested-url/Alert triggered on the string ’ls’ found in a legitimate search query parameter. The traffic originated from an internal IP to letsdefend.io and contains no malicious payload. False positive - rule lacks context awareness for partial string matches.